Route Origin Authorization
$ rpki-client -vvf repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
File: 3230322e36322e382e302f32322d3234203d3e2039333431.roa (raw, json)
Hash identifier: iMFWoUPkOU9pQM7s8u4k+XjQX1O8RX9c/AjV82rgXjM=
Subject key identifier: 76:0B:CF:5A:41:64:8A:26:90:24:8F:D2:FF:76:D1:5E:F9:87:CB:45
Certificate issuer: /CN=61566F205F7037962069571320603B274357CC6D
Certificate serial: 1C5FC62ACAB97E47B2F25C716520797432CA5BD8
Authority key identifier: 61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject info access: rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
Signing time: Tue 25 Mar 2025 03:00:01 +0000
ROA not before: Tue 25 Mar 2025 02:55:01 +0000
ROA not after: Tue 24 Mar 2026 03:00:01 +0000
asID: 9341
IP address blocks: 202.62.8.0/22 maxlen: 24
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
1c:5f:c6:2a:ca:b9:7e:47:b2:f2:5c:71:65:20:79:74:32:ca:5b:d8
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=61566F205F7037962069571320603B274357CC6D
Validity
Not Before: Mar 25 02:55:01 2025 GMT
Not After : Mar 24 03:00:01 2026 GMT
Subject: CN=760BCF5A41648A2690248FD2FF76D15EF987CB45
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:e4:7f:5b:ea:63:9f:66:94:92:cf:5e:dd:f8:a5:
2d:21:ae:8d:8f:ef:1b:4f:8c:dd:90:b6:d6:5e:c5:
21:9b:a0:99:36:3e:67:6f:d9:8f:11:d7:fa:c9:d3:
1d:8d:e1:15:a0:01:b3:22:59:18:57:53:a3:55:51:
dc:33:c4:dc:f8:c7:01:e0:54:bb:d4:f5:02:5b:f7:
6f:70:72:ab:3d:a4:12:72:38:3e:6d:89:43:19:a0:
b0:9c:9c:ac:b4:cb:5a:99:e2:f6:56:d1:71:ac:56:
82:eb:9f:92:b8:19:e0:48:65:66:8a:56:30:e4:90:
bf:02:bb:f9:ec:49:b3:ed:98:ef:59:64:ab:9a:a8:
03:c2:30:77:7e:9f:b6:df:3a:36:53:92:d8:15:af:
c6:f1:7f:2a:09:4b:44:4c:9c:98:ef:a6:2a:e3:a5:
83:a0:7d:35:a8:66:39:27:0d:2d:a5:26:c5:33:3f:
39:8a:d3:a4:d8:8e:98:ab:1f:63:58:8f:de:2f:47:
5b:4b:ff:55:14:58:48:e3:bb:8e:d9:a8:9c:d5:2a:
4f:0e:8d:d8:05:b6:98:9b:f7:7b:11:3c:67:5f:03:
ed:ab:e6:f0:89:72:89:b8:9f:d8:af:de:26:22:94:
a4:b0:68:20:61:88:06:85:7e:3e:e2:17:dd:37:7e:
a7:1b
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
76:0B:CF:5A:41:64:8A:26:90:24:8F:D2:FF:76:D1:5E:F9:87:CB:45
X509v3 Authority Key Identifier:
keyid:61:56:6F:20:5F:70:37:96:20:69:57:13:20:60:3B:27:43:57:CC:6D
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/61566F205F7037962069571320603B274357CC6D.crl
Authority Information Access:
CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/61566F205F7037962069571320603B274357CC6D.cer
Subject Information Access:
Signed Object - URI:rsync://repo-rpki.idnic.net/repo/73bdcbae-2e9d-4f3f-8ab9-3424e448484e/0/3230322e36322e382e302f32322d3234203d3e2039333431.roa
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
202.62.8.0/22
Signature Algorithm: sha256WithRSAEncryption
83:7d:75:12:69:56:c8:b5:70:f5:3d:e7:74:a2:1b:a4:89:20:
19:10:56:be:cb:7d:a8:8a:26:c7:85:50:8e:61:bd:cc:31:f3:
a5:5e:6e:ed:cd:bc:e1:90:03:c5:94:7a:09:4c:ae:9d:4e:c3:
b0:e1:02:6f:4f:00:68:4a:13:ac:0f:30:57:61:d9:34:4d:d8:
4d:bb:bf:50:72:06:ce:fc:73:57:41:ec:25:ab:1c:99:92:2c:
82:5e:ee:b1:ed:39:dd:dd:fc:12:c9:6e:16:b7:64:92:39:23:
80:cf:db:93:37:15:c1:bf:6a:12:cd:00:1a:dc:af:9d:92:0a:
48:d8:5d:9e:f5:2a:77:b3:b0:75:35:8f:12:03:e3:02:2b:0b:
b1:9e:24:da:d5:a5:8d:a6:29:b6:54:f4:b3:8d:07:27:76:a9:
7a:9b:78:2e:1c:c0:72:4f:b3:7e:fa:5d:a8:b7:79:92:01:c6:
45:f5:4e:37:1c:18:1f:ed:85:ba:71:ad:cb:a8:ee:c0:bf:fd:
5c:ef:d3:f6:ec:93:63:bc:7d:35:97:6b:4f:e4:bf:97:43:57:
43:89:02:15:01:c0:f3:20:2b:4e:3e:c2:88:ac:65:55:b4:99:
65:aa:72:81:b2:67:e6:74:57:fa:95:93:98:33:c5:b8:9b:13:
e9:6e:1d:6e
-----BEGIN CERTIFICATE-----
MIIFITCCBAmgAwIBAgIUHF/GKsq5fkey8lxxZSB5dDLKW9gwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0
MzU3Q0M2RDAeFw0yNTAzMjUwMjU1MDFaFw0yNjAzMjQwMzAwMDFaMDMxMTAvBgNV
BAMTKDc2MEJDRjVBNDE2NDhBMjY5MDI0OEZEMkZGNzZEMTVFRjk4N0NCNDUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDkf1vqY59mlJLPXt34pS0hro2P
7xtPjN2QttZexSGboJk2Pmdv2Y8R1/rJ0x2N4RWgAbMiWRhXU6NVUdwzxNz4xwHg
VLvU9QJb929wcqs9pBJyOD5tiUMZoLCcnKy0y1qZ4vZW0XGsVoLrn5K4GeBIZWaK
VjDkkL8Cu/nsSbPtmO9ZZKuaqAPCMHd+n7bfOjZTktgVr8bxfyoJS0RMnJjvpirj
pYOgfTWoZjknDS2lJsUzPzmK06TYjpirH2NYj94vR1tL/1UUWEjju47ZqJzVKk8O
jdgFtpib93sRPGdfA+2r5vCJcom4n9iv3iYilKSwaCBhiAaFfj7iF903fqcbAgMB
AAGjggIrMIICJzAdBgNVHQ4EFgQUdgvPWkFkiiaQJI/S/3bRXvmHy0UwHwYDVR0j
BBgwFoAUYVZvIF9wN5YgaVcTIGA7J0NXzG0wDgYDVR0PAQH/BAQDAgeAMIGFBgNV
HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby83
M2JkY2JhZS0yZTlkLTRmM2YtOGFiOS0zNDI0ZTQ0ODQ4NGUvMC82MTU2NkYyMDVG
NzAzNzk2MjA2OTU3MTMyMDYwM0IyNzQzNTdDQzZELmNybDB0BggrBgEFBQcBAQRo
MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv
L0lETklDLUlELzIvNjE1NjZGMjA1RjcwMzc5NjIwNjk1NzEzMjA2MDNCMjc0MzU3
Q0M2RC5jZXIwgZsGCCsGAQUFBwELBIGOMIGLMIGIBggrBgEFBQcwC4Z8cnN5bmM6
Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vNzNiZGNiYWUtMmU5ZC00ZjNmLThh
YjktMzQyNGU0NDg0ODRlLzAvMzIzMDMyMmUzNjMyMmUzODJlMzAyZjMyMzIyZDMy
MzQyMDNkM2UyMDM5MzMzNDMxLnJvYTAYBgNVHSABAf8EDjAMMAoGCCsGAQUFBw4C
MB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQCyj4IMA0GCSqGSIb3DQEBCwUA
A4IBAQCDfXUSaVbItXD1Ped0ohukiSAZEFa+y32oiibHhVCOYb3MMfOlXm7tzbzh
kAPFlHoJTK6dTsOw4QJvTwBoShOsDzBXYdk0TdhNu79QcgbO/HNXQewlqxyZkiyC
Xu6x7Tnd3fwSyW4Wt2SSOSOAz9uTNxXBv2oSzQAa3K+dkgpI2F2e9Sp3s7B1NY8S
A+MCKwuxniTa1aWNpim2VPSzjQcndql6m3guHMByT7N++l2ot3mSAcZF9U43HBgf
7YW6ca3LqO7Av/1c79P27JNjvH01l2tP5L+XQ1dDiQIVAcDzICtOPsKIrGVVtJll
qnKBsmfmdFf6lZOYM8W4mxPpbh1u
-----END CERTIFICATE-----
Generated at Sat Apr 5 16:44:43 2025 by rpki-client